Privacy Policy

1. Who We Are

Gamers' Strife (“we”, “us”, “our”) is a Discord gaming community platform operating at this website. We are the data controller for the personal data described in this policy. To contact us about privacy matters, email privacy@gamersstrife.com.

2. What Data We Collect

We collect data in the following categories when you use the platform:

2.1 Account & Identity

When you sign in with Discord, we receive and store your Discord user ID, username, global display name, avatar image URL, and (if provided) email address. We also store a URL slug you optionally set for your public profile and a short bio.

2.2 Community Activity

Our Discord bot tracks your server activity and sends it to us via a secure webhook. This includes your message count, voice chat time in minutes, experience points (XP), and level. This data is used to power the member leaderboard and profile statistics.

2.3 Teams & Matches

If you create or join a team, we store your team membership, role (leader, co-leader, etc.), and join date. When you participate in matches, your Discord ID is stored in the match record alongside other participants. If you are a team leader who submits a match result, your ID is linked to the submission, and any proof screenshot you upload is stored in our file storage.

2.4 Gaming Profiles

You may optionally add your in-game usernames (e.g. Riot ID, Steam username) for various games. These are displayed on your public profile.

2.5 Match Performance Statistics

Admins may record per-player match statistics (kills, deaths, assists) following a completed match. These are linked to your Discord ID and displayed on your public profile and the player leaderboard.

2.6 Notifications

We store in-app notifications addressed to your account, including the notification type, message, read status, and timestamp.

2.7 Premium Subscriptions

If you purchase a premium subscription, we store your subscription tier, status, billing period dates, and Polar.sh subscription identifier. Payment card details are handled exclusively by Polar.sh and are never stored by us.

2.8 Admin Audit Logs

When administrators access restricted sections of the platform, we log their user ID, the section accessed, the action performed, their IP address, and browser user agent. This data is used solely for security auditing.

2.9 Session Data

We store active session records (creation time, expiry time, browser user agent) in our database. These expire automatically after 7 days.

3. Legal Basis for Processing

• Contract — Processing your account data, team memberships, and match records is necessary to provide the services you use.
• Legitimate interest — We maintain audit logs and session data to protect the platform against abuse and to keep it secure.
• Consent — You consent to our use of an essential session cookie when you accept the cookie notice. You can withdraw consent by declining cookies (you will be signed out) or by deleting your account.

4. Cookies

We use a single cookie: better-auth.session_token. This is an HTTP-only session cookie set when you log in. It is strictly necessary for authentication and expires after 7 days. We do not use advertising, analytics, or tracking cookies of any kind.

5. How We Use Your Data

• To authenticate you and keep your session secure
• To display your public profile, team memberships, and match history
• To calculate and display community leaderboards and player statistics
• To send in-app notifications about team and match activity
• To manage your premium subscription via Polar.sh
• To send transactional emails (subscription receipts) via Resend
• To detect and prevent abuse through admin audit logs

6. Third-Party Processors

We share data with the following sub-processors as necessary to operate the platform:

7. Data Retention

• Sessions — Automatically expire after 7 days of inactivity.
• Notifications — Retained until you delete your account or they expire as configured.
• Match records — Retained indefinitely as part of the competitive history of the platform. Your Discord ID remains in match records but your account link is removed upon deletion.
• Admin audit logs — Retained for 90 days for security purposes.
• Account data — Retained until you delete your account (see below).

8. Your Rights

Under the GDPR (and equivalent legislation where applicable), you have the following rights regarding your personal data:

• Right of access — Download a copy of all personal data we hold about you from your Settings page.
• Right to erasure — Permanently delete your account and all associated personal data from your Settings page.
• Right to rectification — Update your display name, bio, and custom URL from your Settings page. Your Discord username and avatar are managed through Discord.
• Right to restriction — Contact us at privacy@gamersstrife.com to restrict processing in specific circumstances.
• Right to portability — Use the data export tool in Settings to download your data in JSON format.

9. Data Security

All data is stored in a Supabase-hosted PostgreSQL database with row-level security policies restricting access. Session cookies are HTTP-only and cannot be accessed by JavaScript. OAuth tokens are stored server-side and never exposed to clients. API endpoints are protected by authentication and rate limiting.

10. Children's Privacy

This platform is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us data, contact us and we will delete it promptly.

11. Changes to This Policy

We may update this policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of the platform after changes constitutes acceptance of the revised policy.

12. Contact

For any questions about this policy or to exercise your rights, contact us at privacy@gamersstrife.com.